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This memo proposes that a facility to provide special 
processes for use within the hardcore supervisor be made part of 
the standard Multics system. 

The introduction shows why a special class of processes 
should be available to the supervisor, and how these processes 
must differ from the standard processes. The next section 
describes the actual Implementation at a moderate level of 
detail. The last section presents a scheme for using such a 
process for the TTY interrupt handler. 

A glossary of jargon terms Is provided, as Appendix V. 

This facility has been Implemented and tested in an 
experimental version of the Multics system. Work is underway by 
several people to make use of these processes to simplify certain 
areas of the hardcore supervisor. 



jntrQflMStfpn, 

Multics currently makes no use whatever of multiprogramming 
within the supervisor. This results In highly convoluted coding 
In many parts of the system where a module running In any one 
process tries to multiplex Itself so part of its algorithm seems 
to be executed asynchronously. For example, the TTY Device 
Control Module (DCM) simulates a process for each terminal, with 
its own scheduler and undocumented synchronization facility. In 
many other cases, something Is done In-line that doesn't really 
need to be done synchronously. For example, In the page fault 
path the faulting process currently checks the paging device to 

see If it is getting too full, and if so moves some pages to 
disk. This causes an unnecessary delay for the faulting process, 

and requires the page-moving algorithm to execute In a severely 
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limited environment (fault-side, interrupts masked, can't wait 
for I/O or locks). For another example, some I/O interrupt 
handlers currently execute long programs (taking up to two CPU 
seconds) in the same severely limited environment, requiring 
complicated (undocumented) conventions for co-operation with the 
processes that requested the I/O. 

One can view the page-moving program or interrupt handler as 
a special kind of process that has absolute priority (it always 
runs to completion) but must run in a limited environment. By 
locks or by masking, the programs ensure a single sequential flow 
of control, as by: 

check_pagi ng_devl ce: procedure (); 
set local lock; 
if should_run then run; 
unlock local lock; 
return; 
end; 

A program like this can be made Into a real process. The 
preceding fragment might become: 

pagi ng__devi ce_j>rocess : procedure (); 
whi le true do; 

wa it for wakeup; 

if should_run then run; 

end; 

end; 

and a call to check_pagi ng_devi ce would become a call to send a 
wakeup. 

In summary, there are three reasons why a program may need 
one or more dedicated processes: first, the algorithm may require 
a process per device, as In the TTY DCM; second, it may be 
inconvenient to perform some complex operation in the limited 
environment in which one happens to discover that it needs to be 
done; and third, it may be inefficient to perform the operation 
in the critical path in which one happens to discover that it 
needs to be done. The last point is meant to include the case of 
a program that requires more CPU time than one process can get, 
in order to scale up its performance in a very large system. 

These problems are shared by programs in all rings, both 
user programs and system programs; however, I shal 1 attempt a 
solution only for the hardcore supervisor (ring zero). Let us 
assume that processes are readily available in ring zero for any 
purpose, and examine some likely applications to get a feel for 
the properties such processes must have. This choice of examples 
does affect the resulting design. 

The handler for any external interrupt could run in a 



process of its own, and the Interrupt would merely cause a 
wakeup. Where interrupts are multiplexed (as by the IOM) each 
channel's handler could have a process. Such a process would be 
started when the I/O device (or whatever) was attached, and would 
destroy itself when the device was detached. its program should 
be specified when it is created; if the program is shared (e.g. 
printer driver shared by all printer processes) then an argument 
to the program should specify which device to run. This leads to 
the primitive 

FORK (procedure, argument) 
which creates a new process that starts with the call 

procedure (argument) 
and the pr imi t i ve 

DESTROY^ ME () 

which stops and obi I terates the process which calls it. Clearly 
the handler needs to block wh I 1 e awaiting the next interrupt, so 
a full set of IPC primitives should be available to it. The 
program should be allowed to use the virtual memory (take page 
faults) so it can run In a more normal environment, and avoid the 
expense of wired code and data . The scheduler should provide as 
fast response as the I/O device may require. 

Another application is in resource managers to remove pages 
from core or from the paging device, to remove segments from the 
AST, to remove processes from the eligible list or from the APT, 
etc. Such processes must be created very early in 
initialization, when the function they help implement is not yet 
usable by FORK. Thus page faults are not al 1 owed in creating, 
scheduling, or running a page control process. 

These examples show processes that still run in a somewhat 
limited environment: they must not use the facility that they are 
implementing, and must be trusted by the supervisor because they 
must execute entirely in ring zero. Finally, using processes in 
any application has to be competitive in "cost" so that no 
programmer has to choose between readability and efficiency. 

An ordinary process of the sort currently created for each 
user could meet most of these requirements, with suitable changes 
to keep it in ring zero. However, it is cumbersome, and has 
features which cannot even be initialized by the creating process 
until system initialization is nearly complete for example, it 
has a per-process directory (PDIR) which clearly cannot be 
created until page control, segment control, and the file system 
are all in operation. A simpler type of process must be 
Introduced for use inside the supervisor. Let us dub the new 
type H-process and the old (ordinary) type M-process, for this 
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discussion. As a design goal/ I choose to make the H-process as 
simple as is consistent with providing a normal program-execution 
environment. This should also minimize the "cost" of the 
H-process. The approach taken is to strip away all costly 
features that don't seem to be needed by ail processes. By and 
large, the H-process could regain a feature by explicitly 
i ni ti al i z i ng it. 

First, an H-process can run only in ring zero; thus we can 
eliminate the stack array used by the ring-crossing hardware. 
The programs it can run are totally pre-1 inked; the linker is 
unused and may be disabled. The address space could only be 
extended for data segments and only by explicit calls. Here is a 
very definite design choice: I choose to disallow this extension 
of the address space, in consequence of which I discard the KST. 
This means that the process can never take a segment fault; it 
can't use the file system; It can address non-hardcore segments 
only through explicit calls on segment control. Now the PDIR 
can't be touched/ so discard it; it normally contains a segment 
called PIT by which the system passes initial arguments to a 
M-process -- discard this too, using a few words in the PDS for 
the (greatly reduced) initial conditions. At this point/ only 
two per-process segments are left/ PDS and DSEG/ without which 
the H-process could not run at all. We have reduced the cost of 
the H-process to four pages + two ASTE's; Appendix II describes a 
way to reduce the cost to one page + one ASTE. 

Notice that I have removed features by removing data bases. 
The features that are left, such as inter-process 
synchronization, paged memory, etc. seem to have very little 
incremental (per-process) cost, perhaps because their data bases 
and code are global. 

An H-process can take page faults, service interrupts, and 
compete with M-processes in the scheduler's queues. The 
restrictions on it are less severe than those on fault-side or 
interrupt side programs which It might replace. It can totally 
avoid taking page faults (e.g. for a page control process) by 
executing only in wi red-down code, and can therefore be used as 
deep in hardcore as required. However, it Is poorly suited to 
the outer layers of the supervisor since it can't readily use the 
file system, and therefore can't interface to user processes. 
M-processes should be made available for outer-level applications 
in the supervisor (including ring one), and for user 
applications, but that is outside the scope of this project. 
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Details of proposed implementation 



Multiprogramming is provided by pxss, using tc_data as the 
principal data base. It must be turned on by execution of 
tc_I n i t before it will function normally; however, oxssSwait and 
related entries are simulated during initialization by looping in 
wlred_fin. tc__init is currently invoked very late in 
initialization, so that page control (as a test case) cannot use 
multiprogramming. I propose to call tc_init early in Collection 
One, before page control is initialized. In this environment, 
all segments are unpaged and in core. This state is called the 
high-water mark because the core requirement is at its maximum. 

tc_lnit contains two steps: first, initialize all the 
threaded lists and other data in tc_data; second, create the 
initializer process and all idle processes. The first step does 
not involve any references to data or procedures not present in 
Collection One, and therefore causes no problems. The second 
step starts any extra CPU's, and creates a PRDS for each such 
CPU, as well as a PDS and DSEG for each Idle process. Let us 
assume that the extra CPU's are not started until late in 
Initialization (to avoid two-cpu bugs); the remaining problem is 
the creation of two new segments for the single idle process. 
Any additional processes which may be created (e.g. for page 
control) will also require two new segments. The initializer 
process gets to keep the original PDS and DSEG. 

Other conditions to be met In order for pxss to perform 
properly: those faults and Interrupts used by pxss must be set 
up; a number of routines and data segments must be moved into 
Collection One; FORK and DESTROY__ME subroutines must be provided. 
However, the only problems worth further discussion arise from 
the requirement for a segment-creating primitive available to 
process creation, which must be able to work even before paging 
is avai lable. 

Segments (for PDS or DSEG) could be created unpaged 
initially, like segments read in during Collection One; however, 
update_ss t_pl I, which makes segments paged later on, would have 
difficulty finding the new segments. Any time after init_sst is 
run (which is very early) a paged segment can be created, taking 
a free ASTE and free page frames from appropriate lists. 
Existing page control entries could be used to create and wire 
pages; this approach was taken In the first experiments. 
However, these entries (e.g. wire_wait) ought not to be invoked 
when page control is not yet initialized if, for example, no 
free page existed, they might reference the FSDCT before it is 
addressab le. 

A new subroutine, GETSEG, will be written, to be used during 
both initialization and normal operation. It will get an 
unthreaded ASTE and (if during initialization) will assign page 
frames. It will not wire the pages; that remains the caller's 
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respons i b i 1 i ty . 

It is essential that there be sufficient core left when 
Multics is at the high-water mark for several tasks to be 
created. This requirement is about four pages per task. The 
high-water mark is already very close to the 128K minimum size of 
Multics na In memory, but testing can proceed using a 256K system. 
Appendix I describes one way to reduce the high-water mark, by 
removing segments from Collection One. 

Of course, wiring down more pages of core will of necessity 
degrade system performance. Most PDS's and DSEG's can be 
unloaded by t raf f i c_cont ro 1 , but at least some hardcore tasks 
won't allow that. It is useful to reduce the memory requirements 
of H-processes to reduce the impact on system performance and on 
the high-water mark; Appendix II describes a scheme for 
shrinking the per-process segments. Each H-process also costs 
two small ASTE's for its private segments, and one APTE, 
amounting to 6k words of core. Since the AST and APT can readily 
be made larger, this cost is important only for applications 
requiring hundreds of H-processes. 

Some increase In overhead of traffic control should be 
expected, due to more frequent interactions by H-processes. This 
loss of throughput can be countered by a better implementation of 
the process-switcher. The only other performance degradation to 
be expected is an increase in response time when interrupt -s 1 de 
programs are moved into supervisor tasks, and this would probably 
not affect system throughput. On the other hand, system 
throughput may be Improved by moving certain housekeeping 
functions out of critical paths and by making use of multiple 
CPU's in bottleneck areas. 

An H-process may demand very fast response, which should be 
controlled by a priority attribute used by pxss. Such an 
improvement is not part of this proposal, since acceptable 
performance can be achieved by using a different WAIT entry that 
guarantees fast response. Nevertheless, It has to be done 
sometime. Some scheduling requirements may not be adequately 
expressable by static priorities. This is an example of a 
limitation in pxss that may prevent optimum performance; such 
problems become more complex as more processes co-operate on 
particular computations. 
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Moving TTY DIM Interrupt side processing Into an H-process 



Currently the Datanet-355 front-end processor returns status 
events by sending Multlcs a particular Interrupt. The handler 
for this Interrupt, dn355$ I nter rupt, examines a mailbox at 
location 1400 to find the status word, performing an involved 
inter-computer ritual. For each status word it calls ttv_inter. 
Every three seconds pxss calls t ty_i nter$ pol 1 , in case there 
aren't enough interrupts to drive the program. There Is an 
interlock between tty_Jnter and tty_I nter^pol 1 so both are not 
active at once. 

It is possible to restructure this as follows: The handler 
for the 355 interrupt, tty__wi red$ i nter rupt, merely sends a 
wakeup. A dedicated H-process, executing dn35 5$ tty_process, 
receives the wakeup, then performs the inter-computer ritual and 
calls tty_inter as required. Every three seconds pxss calls 
tty_wl red$pol 1 , which sends the same wakeup and sets a flag. If 
dn355$ tty__process finds the flag set, it calls t ty_i nter<5 pol 1 . 
dn355$ tty_process goes blocked when it runs out of work to do. 

This scheme permits dn355, tty_inter, their utility modules, 
and two data bases to be unwi red, releasing about ten pages of 
core. No further change Is required except to fix a locking 
strategy that only works when interrupts and page faults are not 
allowed. All other interrupt handlers get better response since 
they no longer have to wait while tty_inter runs. (tty_inter 
takes up to two seconds; to make matters worse, the 355 is 
assigned the highest priority interrupt cell.) 

On the other hand, each 355 interrupt might page in all ten 
of the pages we just unwi red, plus two pages of stack. T he extra 
core is really available only when 355 traffic is light. 
Furthermore, the TTY DIM will respond more slowly to interrupts, 
since the scheduler imposes a considerable delay. This is a 
serious problem since the TTY DIM is optimized for 1050-type 
terminals that require ^rogran intervention to go from writing to 
reading; the program ignores characters typed in before it 
changes its internal state from writing to reading even if no 
external action was required. The user with a non-locking 
keyboard may begin typing before the TTY DIM begins listening, 
even in the current system. 

This problem can be solved without delving into the 355 

code: the write DCV7 list created by tty__inter could chain into 

the read DCW list instead of terminating. This would result in a 

noticeable improvement even over the current system and make TTY 
process response relatively unimportant. 

The restructuring (but not the DC17 list chaining) has been 
done and tested in an experimental system, using the improved 
WAIT* (see Appendix III). Response time was found to average 
. 2±. 2 seconds worse than that of the standard system. The 
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experiment should be performed again to refine this measurement. 



goals to continue using this fixed data layout for the PDS and 
PROCESS- I NFO, but it may later prove too inflexible. An 
H-process should be able to grow by adding to itself some of the 
features normally associated only with an M-process. In order to 
avoid reserving large blocks of data in all processes 1 stacks for 
features that only some use, we could reserve a relatively snail 
block of pointers, accessed by name, that would point to the data 
items allocated in whatever segment is most appropriate. The 
Network software already uses such a scheme -- its only cell in 
the PDS contains an index into a system-wide table. 

The DSEG is currently a paged segment of which only about 
256 words are used for hardcore segments. Clearly it can be made 
an unpaged segment If core control Is made able to handle such; 
alternatively, page size could be reduced to 256. But closer 
examination of the DSEG suggests an even more fascinating 
solution: the only SDW's for which our hardcore DSEG differs 
from the template are those for the PDS, PRDS, the DSEG itself, 
and several abs-segs. This suggests that we can save core (at 
the expense of simplicity) by fabricating the DSEG whenever the 
process is to be run. The SDW for the PDS can be saved in the 
A PTE; the PRDS SDW I s already being patched every time an LDBR is 
done; the DSEG SDW would not be changed since It would always 
point to the scratch DSEG it lies in; and the abs-seg SDW f s can 
be saved in the PDS. This can be thought of as sharing the 
current idle process DSEG with other H-processes. 

Combining these tricks can reduce the per-process memory 
requirements by almost 75% for the hardcore-only tasks. 

Both of these changes have been made and tested in an 
experimental system. 
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Appendi x I I I 

Miscellaneous changes required by this system 



A. Descriptor segment creation. 

A DSEG is normally created by plm$hc / which in the current 
system copies the hardcore-segment-number portion of whatever 
DSEG it is running with. ( tempi ate__dseg is still being 
initialized but is never used.) plm has to be moved into 
Collection One, modified to run before paging is available, and 
modified to use the SLT to determine which SDl/'s to copy. 

If plm$hc is invoked early in Collection One, it produces a 
DSEG with the segments unpaged. A routine, set__sdw_i n_al l__dsegs, 
has to be provided, to be called by update__sst_.pl 1 whenever it 
changes an SDW in the initializer's DSEG with the intention that 
it affect all address spaces. segment_Joader, i ni t i a 1 i ze__di ms, 
and delete_segs can use set__sdw_J n__al l__dsegs too. 

One field in a DBR value contains a segment number for an 
array of stack segments, for use in automatic ring crossings. 
Fortunately an H-process doesn't need this field. Its value is 
not determined until all segments are loaded, at which time 
Init_sys_var fills it in for the initializer; i ni t__sys__var has to 
be changed to set it in the APTE and in the register. 

These changes have been made and tested. 



B. PDS creation. 

bu i 1 d_ tempi at e__pds copies a stack header and a stack frane 
into tempi ate__pds; in so doing it messes un the initializer's 
stack. This module is eliminated, since the header can be merged 
with the template by those programs that create new PDS's. 
bu i 1 d_tenpl a te__pds very cutely initializes the stack such that a 
"return" will transfer control to init__proc, the normal M-process 
starting point. However, pxss has to observe that it is running 
a process for the first time in order to do the proper return. 
The requirement that an H-process start in an arbitrary procedure 
forces a change: pxss executes "call stack^OSf i r st_proc 
( stack__0$f i rst__arg)" in the special case instead of "return". It 
turns out that i n i t_processor receives control in this way when 
it starts the bootload CPU, since to pxss the initializer process 
looks like it has never run before. 

bootstrap.? can't initialize the pointer to signal__ in the 
stack header (although the comment says it does) so 
i ni t i al ize__faul ts$faul t_J ni t_two does It later. By moving 
signal_ into Collection One, this can be cleaned up. 

These changes have been made and tested. 
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C. Control flags. 



Assorted flags have to be added to the APTE: 
. hardcore_process / . use_har dcore_dseg, and . al ways_l oaded . If 
. use_hardcore__dseg then the .dbr cell is really an SOW for the 
PDS. Other flags have to be added to v/1 red_hardcore_da ta : 
$page_f aul t_.wo.rks, $segment_faul t_works, and $ i ni t_segs_gone. 

D. Certain deficiencies in the scheduler. 

One little known property of the current scheduler is that a 
process cannot lose its absolute priority (eligibility) unless it 
either takes a timer-runout/pre-empt interrupt while running in 
an outer ring or expl !ci tly ■ call s BLOCK. Since part of BLOCK is 
outside of ring zero and therefore not available to an H-process, 
and since interrupts are masked while running in ring zero, an 
H-process will keep its eligibility even if it uses WAIT, the 
normal ring-zero synchronization method, and will attain the 
highest possible priority. (If any process loops in ring zero, 
it will tie up the CPU forever.) 

Allowing loss of eligibility by pre-emption in ring zero has 
other implications, requiring that eligibility be given up by 
WAIT because of assumptions embedded in all hardcore locking 
strategies, etc. I performed some experiments i n th i s direction, 
concluding that even if I could find all the ramifications of 
such a change, including re-tuning the system, the change would 
have to be made and defended separately. This area remains open 
to anyone wth a particular interest in performance effects. 

For the H-process running the TTY DCM, WAIT was an 

unsatisfactory synchronization primitive, as it left the process 

loaded and eligible indefinitely. I could have introduced a 

slightly different version, WA IT_and_do_wha t_l_want, but instead 

I adapted a different fundamental mechanism originated by David 

Reed, that has been advocated as a primitive capable of 

implementing both WAIT and BLOCK. Reed will soon publish an RFC 
describing his model, so I shall merely describe the 

implementation. 

A shared memory cell is used to pass the information as to 
whether or not an event has occurred. This cell is provided by 
the caller of WAIT' or NOTIFY 1 , which is not inconvenient when a 
shared data base exists anyway, and which avoids the allocation 
problems of WAIT and BLOCK. The cell changes to a new state (in 
fact it is incremented) every time the event occurs (every time 
NOTIFY 1 is called). WAIT' is given both the cell and the state 
it had when the caller first decided to wait; it returns whenever 
the cell contains some newer state. A list of processes waiting 
in this way is needed, so NOTIFY 1 can awaken them. J_n my 
implementa tion , the cell must be wired (since it is examined 
under the APT lock) and at the same address in every orocess 
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using it (since the address is used as a readily-available unique 
i dent i f er ) . 

NOTIFY 1 always awards high priority to an awakened process 
to improve response to interactions. Since the average delay for 
the process to become eligible in the normal way is three seconds 
(unless system load is very light), I had to make NOTIFY 1 award 
eligibility as well. The process will run as soon as the 
lowest-priority running process leaves ring zero and gets 
pre-empted. 

For best response, the pre-empt should be allowed even in 
ring zero. Most of the problems with pre-emption in ring zero 
can be avoided if the pre-empt doesn't take away eligibility, but 
merely causes the highest-priority process to regain the CRN. 
This scheme should be tried as it should make TTY orocess 
response adequate for emulation of i nterrupt-s i de behavior. 

The response time should be determined by a priority 
parameter associated with the process rather than by which WAIT 
the process calls. Future applications of H-processes will make 
such a feature in pxss more desirable. 

The WAIT 1 primitives have been tested in an experimental 

s y s t em . 
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Appendix IV 

Calling sequences of new routines 



A. FORK 
Usage : 

declare creat e_superv i sor_task entry (char (*), entry (pointer), 

pointer, bit (36), bit ( 3G ) ) ; 

call create_superv I sor — task (group__id, F, arg_pointer, 

retur n_proc_i d, return_code) ; 

1) group_id is process group name of new process. 

( I nput ) 

2) F is starting procedure of new process. 

(Input) 

3) ar g^. pointer is passed to F i n the new orocess. (Input) 
h) return_proc_! d identifies the new process. (Output) 

5) return__code is zero if no error occurred. (Output) 

This interface is Intended to remain changeable so that 
additional features can be put in, such as an indication that the 
tricks described in Appendix I I are to be used. 

This entry creates an H-process and starts it running. The 
call to F in the new process is equivalent to: 

call F (arg_poi nter); 

F must not be an internal procedure. The data pointed to by 
arg__pointer must not lie in a per-process segment (such as the 
stack). 



Entry : creat e__superv I sor_task$make_process 

declare crea te_superv i sor__task$make_proces s entry (1 like sdw, 

char (*), bit (36), pointer, bit (36)); 

call create_superv i sor__task$make__process (pds__sdw, group_id, 

return__proc_J d, return_aot_ntr, return_code) ; 

1) pds_sdw is an 5017 describing the POS to be used by 

the new process. (Input) 

2) group_!d as above. (Input) 

3) return_proc_i d as above, except right half must be set by 

caller. (Input/Output) 
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k) return_apt__ptr points to the newly created APT entry. 

(Output) 

5) retu rn__code as above. (Output) 

This entry provides a process in the stopped state. It is 
used in creating the idle process. 



B. DESTROY_ME 

This entry does not yet exist as it is not needed. 



C. GETSEG 
Usage: 

declare ge t_segmen t entry (pointer, fixed binary, 

1 1 ike sdw al igned, bit C 3 TO > ; 
call get__segnent (template, length, return_sdw, return_code) ; 

1) template is a pointer containing a segment number 

which can be used to look up segment 
attributes in the SLT . (Input) 

2) length is the number of words which must be created. 

( I nput ) 

3) return_sdw is an SDW which describes this segment. 

(Output) 

h) return__code is zero iff the operation succeeded. 

(Output ) 

For example, a PDS for a new process may be created by: 
call ge t_segment (addr (pds$), pds$copy__length, pds_sdw, code); 



D. WAIT* and NOTIFY 1 

5nt rv : pxss$wa i t_ on_counter 

declare pxssSwa i t__on_coun ter entry (fixed binary, fixed binary, 

f i xed b i nary ( 71 ) ) ; 
call pxssSwa i t_on_counter (event_cell, last_state, timeout); 

1) event_cel 1 is the shared state cell. (Input) 

2) las t_stat e is a saved copy of the event cell. (Input) 
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3) timeout is an upper bound on wait time, (input) 

Notes 

timeout is not presently implemented; it is a placeholder. 

This entry is normally used as follows: 

L: last_state = event_cel1; 

if should_run then run; 

else call pxss$wa i t__on_ counter (event_cell, las testate, 

3efi); 

goto L; 



Entry : pxss$step_counter 

declare pxss$step_counter entry (fixed binary); 
call pxss$step_ counter ( event__cel 1 ); 

1) event_cel 1 as above. (Input/Output) 

This entry is used to record the occurrence of an event. 
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Appendix V 
Jargon explained 

PDS stands for Process Data Segment. It contains data 
biocks that once were in three distinct per-process, segments 
(pds, pdf, and process_i nf o ) . Some of the data must remain in 
core, so the first page is wired as long as the process is 
eligible. The data items are referenced through links (e.g. 
declare pds$apt_ptr external;) so they must have the same virtual 
address in all processes, although the data is per-process. This 
is accomplished by using the same segment number in each process 
for the per-process segment, and by having the same data layout 
within each segment. The PDS also serves as execution stack for 
ring zero for both call -side and fault -side programs. So that 
the ring-crossing hardware will work, the PDS is also reachable 
by another segment number which is the first in a group of eight 
reserved for stacks. 

PRDS stands for Processor Data Segment. There is one PRDS 

for each CPU in the system. It contains a fairly small data 

block and an execution stack for those faults and interrupts that 

must not cause further faults, e.g. page faults and I/O 
interrupts. The entire PRDS Is wired down. 

DSEG stands for Descriptor Segment. This Is used by the 
hardware to map segment numbers into segments; it defines the 
address space. It may be thought of as a set of hardware 
registers. The first page of the DSEG Is temn-wired whenever the 
process is loaded. 

The machine Instruction LDBR is used to switch the CPU to a 
new DSEG described by a given DBR (Descriptor Base Register) 
val ue. 

SDW stands for Segment Descriptor Word. Each entry in the 
DSEG is an SDW for one segment. The SDW merely points to the 
page table for the segment, or specifies that a segment fault is 
to be caused. 

An abs-seg is a reserved hardcore segment number for which a 
null SDW is present most of the time. Supervisor programs 
fabricate an SDW, stick it in the DSEG, reference the segment for 
a while, then clear the DSEG slot. This Is useful in getting 
around such problems as addressing directories not known in this 
address space. 

ASTE stands for Active Segment Table Entry. The primary 
content of the ASTE is a page table. The AST Is therefore the 
data block containing all page tables, and is part of the wired 
segment sst. 

APTE stands for Active Process Table Entry. The A PTE is 
forty-eight words long, and contains all the data about a 
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particular process needed by traffic control. The APT is 
therefore the data block containing an APTE for each process, and 
is allocated in the wired segment tc_data. 

pxss stands for Process Exchange Switch Stack, combining the 
names of two older traffic control modules. Currently pxss 
contains the bulk of traffic control. 

Eligible processes are those to which enough core has been 
committed for them to run. Eligibility can be revoked after one 
cpu second if the process is running outside ring zero; otherwise 
it can only be lost by an explicit call to BLOCK. Eligibility 
entitles the holder to absolute pre-emptive priority over any 
process wh i ch subsequently becomes eligible. 

To load a process, the first pages of PDS and DSEG are read 
into core and temp-wired. A process will be loaded (by pxss) as 
soon as possible after it is awarded eligibility, and unloaded 
when it loses eligibility. 

KST stands for Known Segment Table. It is primarily used at 
segment-fault time to find a segment that must be made active. 
Hardcore segments are not in the KST as they are always active. 

PD I R stands for Process Directory. This is a per-process 
directory in which an M-process may create its temporary 
segments . 

PIT stands for Process Initialization Table. It is not used 
by hardcore. The outer ring programs of an M-process can find 
their process-creation parameters in this segment. 

DST stands for Device Signal Table. This is a data block 
used by some I/O interfaces, and Is currently allocated in 
tc_data immediately after the ITT, although it has nothing to do 
with traffic control. 

ITT stands for Interprocess Transmission Table. It Is a 
message queue used to pass information with interprocess wakeups. 
It is currently allocated in tc_data between the APT and the DST. 

M-process is a new term, from MPM process. It designates 
the type of process Multlcs has traditionally supplied for each 
user: cumbersome and expensive, but able to use all of the 
features of the Multics environment. An M-process always has an 
unshared address space, implemented with an unshared KST and 
DSEG. It always has a distinct PDIR in which to store its many 
per-process segments. 

H-process is a new term, from hardcore-only process. It 
designates a process which can reference only hardcore segments, 
using a mostly-shared address space. Since even M-processes 
already have Identical address spaces for most ring zero 
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segments/ and the system fs coded to take advantage of this, the 
H-process does not create any unusual programming restrictions. 

An idle process is a fiction of traffic control. There is 
one per CPU, and it is run whenever there is nothing useful for 
that CPU to do. It is not supposed to take page faults because 
that might cause It to become unrunnable. An idle process has an 
unshared PDS and DSEG, and in the current implementation may be 
considered an H-process. 
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